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This listing of claims will replace all prior versions, and listings, of claims in the application. 
Listing off Claims: ' 

1 . (Previously Amended) An enforcement architecture for digital 
rights management, wherein the architecture enforces rights in protected digital content, the 
architecture comprising: 

a content server for distributing the digital content; 
a license server for issuing at least one digital license corresponding to and separate from 
the digital content; and 

a computing device for receiving the distributed digital content and for 
receiving and storing any digital license corresponding to the digital content, the computing 
device having: 

a rendering application for rendering the digital content; and 
a Digital Rights Management (DRM) system for being invoked 

by the rendering application upon such rendering application attempting to render the digital 

content, the DRM system for determining whether a right to render the digital content in the 

manner sought exists based on any digital license stored in the computing device and 

corresponding to the digital content, 

wherein the license server issues a digital license to the DRM system 

only if the license server trusts such DRM system to abide by the license, and 

wherein the content server distributes the digital content in an 

encrypted form, and wherein the DRM system includes a trusted black box for performing 

decryption and encryption functions for such DRM system. 

2. (Original) The architecture of claim 1, wherein the content server 
is communicatively coupled to a network and distributes the digital content over the network. 

3. (Original) The architecture of claim 2, wherein the content server 
is communicatively coupled to the Internet and distributes the digital content over the 
Internet. 
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4. (Original) The architecture of claim 1, wherein the license server 
is communicatively coupled to a network and issues the at least one digital license over the 
network. 

5. (Original) The architecture of claim 4, wherein the license server 
is communicatively coupled to the Internet and issues the at least one digital license over the 
Internet. 



6. (Original) The architecture of claim 1, wherein the content server 
is communicatively coupled to a portable medium writer and distributes the digital content on 
a portable medium written by the portable medium writer, the portable medium selected from 
the group consisting of an optical storage medium and a magnetic storage medium. 

7. (Original) The architecture of claim 1, wherein the content server 
distributes the digital content in an encrypted form. 

8. (Original) The architecture of claim 7, wherein each digital license 
corresponding to the digital content includes: 

a decryption key that decrypts the encrypted digital content; and 
a description of the rights conferred by the license, wherein the 

encrypted digital content cannot be decrypted and rendered without obtaining such license 

from the license server. 



9. (Original) The architecture of claim 8, wherein each digital license 
corresponding to the digital content further includes a digital signature that binds the license 
to the encrypted digital content. 



10. (Original) The architecture of claim 1, wherein if the DRM system 
determines that the right to render the digital content in the manner sought does not exist 
based on any digital license stored in the computing device and corresponding to the digital 
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content, such DRM system directs a computing device user to the license server to obtain a 
digital license to render such digital content in the manner sought. 

11. (Original) The architecture of claim 1, wherein if the DRM system 
determines that the right to render the digital content in the manner sought does not exist 
based on any digital license stored in the computing device and corresponding to the digital 
content, such DRM system transparently obtains a digital license from the license server 
without any action necessary on the part of a computing device user. 

12. (Original) The architecture of claim 1, wherein the DRM system 
includes a license store for storing digital licenses. 

13. (Original) The architecture of claim 1, wherein each digital license 
corresponding to the digital content is bound to such digital content. 

14. (Original) The architecture of claim 13, wherein each digital 
license corresponding to the digital content is bound to such digital content by way of a 
public / private key technique. 

15. (Canceled) 

16. (Canceled) 

17. (Previously Amended) The architecture of claim 1, wherein the 
black box includes a unique public / private key pair for performing the decryption and 
encryption functions. 

1 8. (Original) The architecture of claim 17, wherein the license server 
issues each digital license in response to a license request from the DRM system, the license 
request including the black box public key, the license server encrypting at least a portion of 
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the digital license according to the black box public key prior to issuance of such license, 
thereby binding such license to such black box. 

19. (Original) The architecture of claim 18, wherein the content server 
distributes the digital content in an encrypted form, wherein each digital license 
corresponding to the digital content includes a decryption key that decrypts the encrypted 
digital content, and wherein the license server encrypts the decryption key in the license 
according to the black box public key. 

20. (Original) The architecture of claim 19, wherein each digital 
license corresponding to the digital content further includes a description of the rights 
conferred by the license, wherein the encrypted digital content cannot be decrypted and 
rendered without obtaining such license from the license server, and wherein the license 
server encrypts the rights description in the license according to the decryption key. 

2 1 . (Previously Amended) The architecture of claim 1 , wherein the 
black box includes a version number. 

22. (Original) The architecture of claim 21 wherein the license server 
issues each digital license in response to a license request from the DRM system, the license 
request including the version number of the black box, the license server determining prior to 
issuance of the license whether the version number of the black box is acceptable, the license 
server upon determining that the version number of the black box is not acceptable refusing 
to issue the license until the black box is updated, the architecture further comprising a black 
box server for providing an updated black box to the DRM system. 

23. (Previously Amended) The architecture of claim 1 , wherein the black 
box includes a certifying authority signature as provided by an approved certifying authority. 

24. (Original) The architecture of claim 23 wherein the license server 

issues each digital license in response to a license request from the DRM system, the license 
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request including the certifying authority signature, the license server determining prior to 
issuance of the license whether the certifying authority signature is valid. 

25. (Previously Amended) The architecture of claim 1, wherein each 
digital license corresponding to the digital content includes a description of the rights 
conferred by the license, and wherein the DRM system includes a trusted license evaluator 
for evaluating the rights description and allowing rendering of the digital content by the 
rendering application only if such rendering is in accordance with the rights description of the 
license. 

26. (Original) The architecture of claim 1 further comprising an issued 
license database for maintaining information on digital licenses issued by the license server, 
wherein if the computing device loses a received license, a re-issue thereof may be provided 
based on the information in the issued license database. 

27. (Original) The architecture of claim 1 further comprising an 
authoring tool for authoring the digital content distributed by the content server in a form 
amenable to the architecture. 

28. (Original) The architecture of claim 27 wherein the authoring tool 
encrypts the digital content according to a decryption key and stores information on the 
digital content and the encryption key in a content-key database. 

29. (Original) The architecture of claim 28 wherein the license server 
accesses the information on the digital content and the encryption key in the content-key 
database prior to issuance of a license corresponding to the digital content, and includes the 
decryption key with such license as issued. 

30. (Previously Amended) A method for implementing digital rights 
management, wherein the method enforces rights in protected digital content, the method 
comprising: 
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distributing the digital content from a content server to a computing 



device of a user; 



receiving the distributed digital content at the computing device; 
attempting to render the digital content by way of a rendering 



application; 



invoking, by the rendering application, a Digital Rights Management 



(DRM) system upon such rendering application attempting to render the digital content; 



content in the manner sought exists based on any digital license stored in the computing 
device and corresponding to the digital content; and 



digital license to the DRM system only if the license server trusts such DRM system to abide 
by the license, and 



content server, the digital content in an encrypted form, and further comprising employing a 
trusted black box in the DRM system to perform decryption and encryption functions for 
such DRM system. 

3 1 . (Original) The method of claim 30, wherein the distributing step 
comprises distributing the digital content over a network. 

32. (Original) The method of claim 3 1 , wherein the distributing step 

comprises distributing the digital content over the Internet. 
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33. (Original) The method of claim 30, wherein the issuing step 
comprises issuing the digital license over a network. 

34. (Original) The method of claim 33, wherein the issuing step 
comprises issuing the digital license over the Internet. 

35. (Original) The method of claim 30, wherein the distributing step 
comprises distributing the digital content on a portable medium selected from the group 
consisting of an optical storage medium and a magnetic storage medium. 

36. (Original) The method of claim 30, wherein the distributing step 
comprises distributing the digital content in an encrypted form. 

37. (Original) The method of claim 36, further comprising including 
with each digital license corresponding to the digital content: 

a decryption key that decrypts the encrypted digital content; and 
a description of the rights conferred by the license, wherein the 

encrypted digital content cannot be decrypted and rendered without obtaining such license 

from the license server. 

38. (Original) The method of claim 37, wherein the including step 
further comprises including with each digital license corresponding to the digital content a 
digital signature that binds the license to the encrypted digital content. 

39. (Original) The method of claim 30, wherein the requesting a 
digital license step comprises directing, by the DRM system, a computing device user to the 
license server to obtain a digital license to render such digital content in the manner sought. 
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33. (Original) The method of claim 30, wherein the issuing step 
comprises issuing the digital license over a network. 

34. (Original) The method of claim 33, wherein the issuing step 
comprises issuing the digital license over the Internet. 

35. (Original) The method of claim 30, wherein the distributing step 
comprises distributing the digital content on a portable medium selected from the group 
consisting of an optical storage medium and a magnetic storage medium. 

36. (Original) The method of claim 30, wherein the distributing step 
comprises distributing the digital content in an encrypted form. 

37. (Original) The method of claim 36, further comprising including 
with each digital license corresponding to the digital content: 

a decryption key that decrypts the encrypted digital content; and 
a description of the rights conferred by the license, wherein the 

encrypted digital content cannot be decrypted and rendered without obtaining such license 

from the license server. 

38. (Original) The method of claim 37, wherein the including step 
further comprises including with each digital license corresponding to the digital content a 
digital signature that binds the license to the encrypted digital content. 

39. (Original) The method of claim 30, wherein the requesting a 
digital license step comprises directing, by the DRM system, a computing device user to the 
license server to obtain a digital license to render such digital content in the manner sought. 
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40. (Original) The method of claim 30, wherein the requesting a 
digital license step comprises transparently obtaining, by the DRM system, a digital license 
from the license server without any action necessary on the part of a computing device user. 

41 . (Original) The method of claim 30, wherein the storing step 
comprises storing, by the DRM system, the received digital license in a license store of the 
DRM system. 

42. (Original) The method of claim 30, further comprising binding, by 
the license server, the digital license to the corresponding digital content. 

43. (Original) The method of claim 42, comprising binding, by the 
license server, the digital license to the corresponding digital content by way of a public / 
private key technique. 

44. (Canceled) 

45. (Canceled) 

46. (Previously Amended) The method of claim 30, wherein the 
black box includes a public / private key pair, and wherein the requesting a digital license 
step comprises including in the request the black box public key, and further comprising 
encrypting, by the license server, at least a portion of the digital license according to the black 
box public key prior to issuance of such license, thereby binding such license to such black 
box. 

47. (Original) The method of claim 46, wherein the distributing step 
comprises distributing the digital content in an encrypted form, and further comprising: 

including with each digital license corresponding to the digital content 
a decryption key that decrypts the encrypted digital content; and 
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encrypting, by the license server, the decryption key in the license 
according to the black box public key. 

48. (Original) The method of claim 47, further comprising: 
including with each digital license corresponding to the digital content 

a description of the rights conferred by the license, wherein the encrypted digital content 
cannot be decrypted and rendered without obtaining such license from the license server; and 

encrypting, by the license server, the rights description in the license 
according to the decryption key. 

49. (Previously Amended) The method of claim 30, wherein the 
black box includes a version number, and wherein the requesting a digital license step 
comprises including in the request the version number of the black box, and further 
comprising: 

determining, by the license server, prior to issuance of the license 
whether the version number of the black box is acceptable; and 

upon determining that the version number of the black box is not 
acceptable, the license server refusing to issue the license until the black box is updated, the 
architecture further comprising a black box server for providing an updated black box to the 
DRM system. 

50. (Previously Amended) The method of claim 30, wherein the 
black box includes a certifying authority signature as provided by an approved certifying 
authority, and wherein the requesting a digital license step comprises including the certifying 
authority signature, the license server determining prior to issuance of the license whether the 
certifying authority signature is valid. 

5 1 . (Previously Amended) The method of claim 30, wherein the 
issuing the digital license step comprises including with the digital license a description of the 
rights conferred by the license, and further comprising: 
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evaluating, by a trusted license evaluator of the DRM system, the 

rights description; and 

allowing rendering of the digital content by the rendering application 
only if such rendering is in accordance with the rights description of the license. 



52. (Original) The method of claim 30 further comprising maintaining 
information on digital licenses issued by the license server in an issued license database, 
wherein if the computing device loses a received license, a re-issue thereof may be provided 
based on the information in the issued license database. 



53. (Original) The method of claim 30 further comprising authoring, 
by an authoring tool, the digital content distributed by the content server in a form amenable 
to the architecture. 



54. (Original) The method of claim 53 wherein the authoring step 

comprises: 

encrypting the digital content according to a decryption key; and 
storing information on the digital content and the encryption key in a 

content-key database. 



55. (Original) The method of claim 54 wherein the issuing the digital 
license step comprises: 

accessing, by the license server, the information on the digital content 
and the encryption key in the content-key database prior to issuance of a license 
corresponding to the digital content; and 

including the decryption key with such license as issued. 

56. (Previously Amended) An enforcement architecture for digital 
rights management, wherein the architecture enforces rights in protected digital content, the 
architecture comprising: 
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a content server communicatively coupled to a network for distributing the digital content 
over the network; 

a license server for issuing at least one digital license corresponding to and separate from 
the digital content, the license server being communicatively coupled to the network for 
issuing the at least one digital license over the network; and 

a computing device communicatively coupled to the network for 
receiving the distributed digital content and for receiving any digital license corresponding to 
the digital content, the computing device also having: 

a memory for storing any digital license corresponding to the 

digital content; 

a rendering application for attempting to render the digital 

content; and 

a Digital Rights Management (DRM) system for being invoked 
by the rendering application upon such rendering application attempting to render the digital 
content, the DRM system for determining whether a right to render the digital content in the 
manner sought exists based on any digital license stored in the computing device and 
corresponding to the digital content; 

wherein the license server issues a digital license to a DRM system 
only if the license server trusts such DRM system to abide by the license, and 

wherein the content server distributes the digital content in an 
encrypted form, and wherein the DRM system includes a trusted black box for performing 
decryption and encryption functions for such DRM system. 

57. (Original) The architecture of claim 56, wherein the content server 
is communicatively coupled to the Internet and distributes the digital content over the 
Internet. 

58. (Original) The architecture of claim 56, wherein the license server 
is communicatively coupled to the Internet and issues the at least one digital license over the 
Internet. 
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59. (Original) The architecture of claim 56, wherein the content server 
is also communicatively coupled to a portable medium writer and distributes the digital 
content on a portable medium written by the portable medium writer, the portable medium 
selected from the group consisting of an optical storage medium and a magnetic storage 
medium, and wherein the computing device includes a portable medium reader corresponding 
to the portable medium writer for receiving and reading the portable medium. 

60. (Original) The architecture of claim 56, wherein the content server 
distributes the digital content in an encrypted form. 

61. (Original) The architecture of claim 60, wherein each digital 
license corresponding to the digital content includes: 

a decryption key that decrypts the encrypted digital content; and 
a description of the rights conferred by the license, wherein the 

encrypted digital content cannot be decrypted and rendered without obtaining such license 

from the license server. 

62. (Original) The architecture of claim 61, wherein each digital 
license corresponding to the digital content further includes a digital signature that binds the 
license to the encrypted digital content. 

63. (Original) The architecture of claim 56, wherein if the DRM 
system determines that the right to render the digital content in the mariner sought does not 
exist based on any digital license stored in the computing device and corresponding to the 
digital content, such DRM system directs a computing device user to the license server to 
obtain a digital license to render such digital content in the manner sought. 

64. (Original) The architecture of claim 56, wherein if the DRM 

system determines that the right to render the digital content in the manner sought does not 

exist based on any digital license stored in the computing device and corresponding to the 

Page 13 of 31 



DOCKET NO.: MSFT-0035/127334.1 PATENT 

Application No.: 09/290,363 

Office Action Dated: January 9, 2004 

digital content, such DRM system transparently obtains a digital license from the license 
server without any action necessary on the part of a computing device user. 



65. (Original) The architecture of claim 56, wherein the DRM system 
includes a license store for storing digital licenses. 

66. (Original) The architecture of claim 56, wherein each digital 
license corresponding to the digital content is bound to such digital content. 



67. (Original) The architecture of claim 66, wherein each digital 
license corresponding to the digital content is bound to such digital content by way of a 
public / private key technique. 



68. (Canceled) 

69. (Canceled) 



70. (Previously Amended) The architecture of claim 56, wherein the 
black box includes a unique public / private key pair for performing the decryption and 
encryption functions. 

71 . (Original) The architecture of claim 70, wherein the license server 
issues each digital license in response to a license request from the DRM system, the license 
request including the black box public key, the license server encrypting at least a portion of 
the digital license according to the black box public key prior to issuance of such license, 
thereby binding such license to such black box. 



72. (Original) The architecture of claim 71, wherein the content server 
distributes the digital content in an encrypted form, wherein each digital license 
corresponding to the digital content includes a decryption key that decrypts the encrypted 
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digital content, and wherein the license server encrypts the decryption key in the license 
according to the black box public key. 

73. (Original) The architecture of claim 72, wherein each digital 
license corresponding to the digital content further includes a description of the rights 
conferred by the license, wherein the encrypted digital content cannot be decrypted and 
rendered without obtaining such license from the license server, and wherein the license 
server encrypts the rights description in the license according to the decryption key. 

74. (Currently Amended) The architecture of claim 56, wherein the black 
box includes a version number. 

75. (Original) The architecture of claim 74 wherein the license server 
issues each digital license in response to a license request from the DRM system, the license 
request including the version number of the black box, the license server determining prior to 
issuance of the license whether the version number of the black box is acceptable, the license 
server upon determining that the version number of the black box is not acceptable refusing 
to issue the license until the black box is updated, the architecture further comprising a black 
box server for providing an updated black box to the DRM system. 

76. (Previously Amended) The architecture of claim 56, wherein the 
black box includes a certifying authority signature as provided by an approved certifying 
authority. 

77. (Original) The architecture of claim 76 wherein the license server 
issues each digital license in response to a license request from the DRM system, the license 
request including the certifying authority signature, the license server determining prior to 
issuance of the license whether the certifying authority signature is valid. 

78. (Previously Amended) The architecture of claim 56, wherein 

each digital license corresponding to the digital content includes a description of the rights 
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conferred by the license, and wherein the DRM system includes a trusted license evaluator 
for evaluating the rights description and allowing rendering of the digital content by the 
rendering application only if such rendering is in accordance with the rights description of the 
license. 

79. (Original) The architecture of claim 56 further comprising an 
issued license database for maintaining information on digital licenses issued by the license 
server, wherein if the computing device loses a received license, a re-issue thereof may be 
provided based on the information in the issued license database. 

80. (Original) The architecture of claim 56 further comprising an 
authoring tool for authoring the digital content distributed by the content server in a form 
amenable to the architecture. 

81 . (Original) The architecture of claim 80 wherein the authoring tool 
encrypts the digital content according to a decryption key and stores information on the 
digital content and the encryption key in a content-key database. 

82. (Original) The architecture of claim 81 wherein the license server 
accesses the information on the digital content and the encryption key in the content-key 
database prior to issuance of a license corresponding to the digital content, and includes the 
decryption key with such license as issued. 

83. (Previously Amended) An enforcement architecture for digital 
rights management, wherein the architecture enforces rights in protected digital content, the 
architecture comprising: 

an authoring tool for authoring the digital content in a form amenable to the architecture; 

a content server for receiving the digital content from the authoring 
tool and distributing the digital content; and 
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a license server for issuing at least one digital license corresponding to 



and separate from the digital content, wherein a computing device receives the distributed 
digital content and receives and stores any digital license corresponding to the digital content, 
the computing device having a rendering application for rendering the digital content; and a 
Digital Rights Management (DRM) system for being invoked by the rendering application 
upon such rendering application attempting to render the digital content, the DRM system for 
determining whether a right to render the digital content in the manner sought exists based on 
any digital license stored in the computing device and corresponding to the digital content, 

wherein the license server issues a digital license to a DRM system 
only if the license server trusts such DRM system to abide by the license, and 

wherein the content server distributes the digital content in an 
encrypted form, wherein the DRM system includes a trusted black box for performing 
decryption and encryption functions for such DRM system, wherein the black box includes a 
unique public / private key pair for performing the decryption and encryption functions, and 
wherein the license server issues each digital license in response to a license request from the 
DRM system, the license request including the black box public key, the license server 
encrypting at least a portion of the digital license according to the black box public key prior 
to issuance of such license, thereby binding such license to such black box. 

84. (Original) The architecture of claim 83, wherein the content server 
is communicatively coupled to a network and distributes the digital content over the network. 

85. (Original) The architecture of claim 84, wherein the content server 
is communicatively coupled to the Internet and distributes the digital content over the 
Internet. 

86. (Original) The architecture of claim 83, wherein the license server 
is communicatively coupled to a network and issues the at least one digital license over the 
network. 
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87. (Original) The architecture of claim 86 5 wherein the license server is 
communicatively coupled to the Internet and issues the at least one digital license over the 
Internet. 

88. (Original) The architecture of claim 83, wherein the content server 
is communicatively coupled to a portable medium writer and distributes the digital content on 
a portable medium written by the portable medium writer, the portable medium selected from 
the group consisting of an optical storage medium and a magnetic storage medium. 

89. (Original) The architecture of claim 1, wherein the content server 
distributes the digital content in an encrypted form. 

90. (Original) The architecture of claim 89, wherein each digital 
license corresponding to the digital content includes: 

a decryption key that decrypts the encrypted digital content; and 
a description of the rights conferred by the license, wherein the 

encrypted digital content cannot be decrypted and rendered without obtaining such license 

from the license server. 

9 1 . (Original) The architecture of claim 90, wherein each digital 
license corresponding to the digital content further includes a digital signature that binds the 
license to the encrypted digital content. 

92. (Original) The architecture of claim 83, wherein a computing 
device user is directed to the license server by the DRM system to obtain a digital license to 
render the digital content in the manner sought if the DRM system determines that the right to 
render such digital content in the manner sought does not exist based on any digital license 
stored in the computing device and corresponding to the digital content. 
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93. (Original) The architecture of claim 83, wherein the DRM system 
transparently obtains a digital license from the license server without any action necessary on 
the part of a computing device user if the DRM system determines that the right to render the 
digital content in the manner sought does not exist based on any digital license stored in the 
computing device and corresponding to the digital content. 



94. (Original) The architecture of claim 83, wherein each digital 
license corresponding to the digital content is bound to such digital content. 

95. (Original) The architecture of claim 94, wherein each digital 
license corresponding to the digital content is bound to such digital content by way of a 
public / private key technique. 



96. (Canceled) 

97. (Canceled) 



98. (Previously Amended) The architecture of claim 83, wherein the 
content server distributes the digital content in an encrypted form, wherein each digital 
license corresponding to the digital content includes a decryption key that decrypts the 
encrypted digital content, and wherein the license server encrypts the decryption key in the 
license according to the black box public key. 

99. (Original) The architecture of claim 98, wherein each digital 
license corresponding to the digital content further includes a description of the rights 
conferred by the license, wherein the encrypted digital content cannot be decrypted and 
rendered without obtaining such license from the license server, and wherein the license 
server encrypts the rights description in the license according to the decryption key. 



100. (Previously Amended) The architecture of claim 83, wherein the 

black box includes a version number, and wherein the license server issues each digital 

license in response to a license request from the DRM system, the license request including 
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the version number of the black box, the license server determining prior to issuance of the 
license whether the version number of the black box is acceptable, the license server upon 
determining that the version number of the black box is not acceptable refusing to issue the 
license until the black box is updated, the architecture further comprising a black box server 
for providing an updated black box to the DRM system. 

101 . (Previously Amended) The architecture of claim 83, wherein the 
black box includes a certifying authority signature as provided by an approved certifying 
authority, and wherein the license server issues each digital license in response to a license 
request from the DRM system, the license request including the certifying authority 
signature, the license server determining prior to issuance of the license whether the 
certifying authority signature is valid. 

102. (Original) The architecture of claim 96, wherein each digital 
license corresponding to the digital content includes a description of the rights conferred by 
the license, and wherein the DRM system includes a trusted license evaluator for evaluating 
the rights description and allowing rendering of the digital content by the rendering 
application only if such rendering is in accordance with the rights description of the license. 

103. (Original) The architecture of claim 83 further comprising an 
issued license database for maintaining information on digital licenses issued by the license 
server, wherein if the computing device loses a received license, a re-issue thereof may be 
provided based on the information in the issued license database. 

104. (Original) The architecture of claim 83 wherein the authoring tool 
encrypts the digital content according to a decryption key and stores information on the 
digital content and the encryption key in a content-key database. 

105. (Original) The architecture of claim 104 wherein the license server 

accesses the information on the digital content and the encryption key in the content-key 
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database prior to issuance of a license corresponding to the digital content, and includes the 
decryption key with such license as issued. 

106. (Previously Amended) A computer-readable medium having 
stored thereon computer-executable instructions for implementing a method for enforcing 
rights in protected digital content, the method comprising: 

receiving digital content distributed from a content server; 
receiving and storing at least one digital license issued from a license 
server, the at least one digital license corresponding to and separate from the digital content; 

attempting to render the digital content on a rendering application in a 

particular manner; 

invoking a Digital Rights Management (DRM) system upon such 
rendering application attempting to render the digital content; and 

determining, by the DRM system, whether a right to render the digital 
content in the manner sought exists based on the at least one stored digital license 
corresponding to the digital content, 

wherein the method comprises receiving and storing at least one digital 
license only if the license server trusts the DRM system to abide by the license, and 

wherein the method comprises receiving the digital content in an 
encrypted form, and further comprises performing decryption of the digital content by way of 
a trusted black box of the DRM system. 

107. (Previously Added) The medium of claim 106 wherein the method 
comprises receiving digital content distributed from the content server over a network. 

108. (Previously Added) The medium of claim 107 wherein the method 
comprises receiving digital content distributed from the content server over the Internet. 
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1 09. (Previously Added) The medium of claim 1 06 wherein the method 
comprises receiving and storing at least one digital license issued from the license server over 
a network. 



110. (Previously Added) The medium of claim 1 09 wherein the method 
comprises receiving and storing at least one digital license issued from the license server over 
the Internet. 

111. (Previously Added) The medium of claim 1 06 wherein the method 
comprises receiving the digital content in an encrypted form. 

112. (Previously Added) The medium of claim 111 wherein the method 
comprises receiving and storing at least one digital license including: 

a decryption key that decrypts the encrypted digital content; and 
a description of the rights conferred by the license, wherein the encrypted digital content 
cannot be decrypted and rendered without obtaining such license from the license server. 

113. (Previously Added) The medium of claim 112 wherein the method 
comprises receiving and storing at least one digital license corresponding to the digital 
content and further including a digital signature that binds the license to the encrypted digital 
content. 

114. (Previously Added) The medium of claim 106 wherein the method 
further comprises directing a user to the license server to obtain a digital license to render 
such digital content in the manner sought if the DRM system determines that a right to render 
the digital content in the manner sought does not exist based on the at least one stored digital 
license corresponding to the digital content. 

115. (Previously Added) The medium of claim 1 06 wherein the method 
further comprises transparently obtaining a digital license from the license server without any 
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action necessary on the part of a computing device user if the DRM system determines that a 
right to render the digital content in the manner sought does not exist based on the at least one 
stored digital license corresponding to the digital content. 

116. (Previously Added) The medium of claim 106 wherein the method 
comprises receiving and storing at least one digital license bound to the digital content. 

117. (Previously Added) The medium of claim 116 wherein the method 
comprises receiving and storing at least one digital license bound to the digital content by 
way of a public / private key technique. 

118. (Canceled) 

119. (Canceled) 

120. (Previously Amended) The medium of claim 106 wherein the 
method comprises receiving the digital content in an encrypted form, and further comprises 
performing decryption of the digital content by way of a trusted black box of the DRM 
system, the black box including a unique public / private key pair for performing the 
decryption. 

121. (Previously Added) The medium of claim 1 20 wherein the method 
comprises receiving and storing at least one digital license in response to a license request 
from the DRM system, the license request including the black box public key, at least a 
portion of the digital license being encrypted according to the black box public key prior to 
issuance of such license, thereby binding such license to such black box. 

122. (Previously Added) The medium of claim 121 wherein the method 
comprises receiving the digital content in an encrypted form, wherein each digital license 
corresponding to the digital content includes a decryption key that decrypts the encrypted 
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digital content, and wherein the decryption key is encrypted in the license according to the 
black box public key. 

123. (Previously Added) The medium of claim 120 wherein the method 
comprises receiving and storing at least one digital license further including a description of 
the rights conferred by the license, wherein the encrypted digital content cannot be decrypted 
and rendered without obtaining such license from the license server. 

124. (Previously Amended) The medium of claim 106 wherein the method 
comprises receiving and storing at least one digital license in response to a license request 
from the DRM system, the license request including a version number of the black box, the 
license server determining prior to issuance of the license whether the version number of the 
black box is acceptable. 

125. (Previously Amended) The medium of claim 106 wherein the 
method comprises receiving and storing at least one digital license including a description of 
the rights conferred by the license, the method further comprising evaluating by a trusted 
license evaluator of the DRM system the rights description and allowing rendering of the 
digital content by the rendering application only if such rendering is in accordance with the 
rights description of the license. 

126. (Previously Amended) A method for implementing digital rights 
management, wherein the method enforces rights in protected digital content, the method 
comprising: 

receiving the distributed digital content at the computing device; 
attempting to render the digital content by way of a rendering 

application; 

invoking, by the rendering application, a Digital Rights Management 
(DRM) system upon such rendering application attempting to render the digital content; 
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determining, by the DRM system, whether a right to render the digital 
content in the manner sought exists based on any digital license stored in the computing 
device and corresponding to the digital content; and 

if the right does not exist: 

requesting from a license server a digital license that provides 
such right and that corresponds to and is separate from the digital content; 

receiving, by the computing device, the issued digital license 
corresponding to the digital content from the license server; and 

storing the received digital license on the computing device^ 
the method further comprising employing a trusted black box in the 
DRM system to perform decryption and encryption functions for such DRM system, 

wherein the black box includes a public / private key pair, and 
wherein requesting the digital license comprises including in the request the black box public 
key, wherein the license server encrypts at least a portion of the digital license according to 
the black box public key prior to issuance of such license, thereby binding such license to 
such black box. 

127. (Previously Added) The method of claim 126 wherein each 
receiving step comprises receiving over a network. 

128. (Previously Added) The method of claim 127 wherein each 
receiving step comprises receiving over the Internet. 

129. (Previously Added) The method of claim 126 comprising receiving the 

digital content on a portable medium selected from a group consisting of an optical 
storage medium and a magnetic storage medium. 

130. (Previously Added) The method of claim 126 comprising receiving 
the digital content in an encrypted form. 
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131. (Previously Added) The method of claim 130 comprising receiving 
the issued digital license including: 

a decryption key that decrypts the encrypted digital content; and 
a description of the rights conferred by the license, wherein the 

encrypted digital content cannot be decrypted and rendered without obtaining such license 

from the license server. 

132. (Previously Added) The method of claim 131 comprising receiving 
the issued digital license further including a digital signature that binds the license to the 
encrypted digital content. 

133. (Previously Added) The method of claim 126 wherein requesting a 
digital license comprises directing, by the DRM system, a computing device user to the 
license server to obtain a digital license to render such digital content in the manner sought. 

134. (Previously Added) The method of claim 126 wherein requesting a 
digital license comprises transparently obtaining, by the DRM system, a digital license from 
the license server without any action necessary on the part of a computing device user. 

135. (Previously Added) The method of claim 126 comprising receiving a 
digital license bound to the corresponding digital content by way of a public / private key 
technique. 



receiving the digital content in an encrypted form and receiving the digital license including a 



136. (Canceled) 



137. (Canceled) 



138. (Previously Amended) 



The method of claim 126 comprising 
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decryption key that decrypts the encrypted digital content, the decryption key being 
encrypted according to the black box public key. 



139. (Previously Added) The method of claim 138 comprising receiving 
the digital license including a description of the rights conferred by the license, wherein the 
encrypted digital content cannot be decrypted and rendered without obtaining such license 
from the license server, the rights description in the license being encrypted according to the 
decryption key. 

140. (Previously Amended) The method of claim 126 wherein the 
black box includes a certifying authority signature as provided by an approved certifying 
authority, and wherein requesting a digital license comprises including the certifying 
authority signature, the license server determining prior to issuance of the license whether the 
certifying authority signature is valid. 

141 . (Previously Amended) The method of claim 126 wherein the 
issued digital license includes a description of the rights conferred by the license, and further 
comprising: 

evaluating, by a trusted license evaluator of the DRM system, the 

rights description; and 

allowing rendering of the digital content by the rendering application 
only if such rendering is in accordance with the rights description of the license. 



142. (Previously Added) The method of claim 126 further comprising 
maintaining information on digital licenses issued by the license server in an issued license 
database, wherein if the computing device loses a received license, a re-issue thereof may be 
provided based on the information in the issued license database. 

^> 
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